Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/90606AD670AA11ED8DAE4C5AC4F9AE02.roa
File: 90606AD670AA11ED8DAE4C5AC4F9AE02.roa (raw, json)
Hash identifier: K4ZsrhlRHbGz6KmikspiKMatFVTA+yV67UI0J6tV1jI=
Subject key identifier: F8:A1:8B:31:8C:63:FC:E6:19:9F:1A:5B:4C:8B:87:26:CD:ED:F5:C9
Certificate issuer: /CN=A9165A0B/serialNumber=71AA58CDF1B6BD7C26E61A7518A4D0AD2C9F1A14
Certificate serial: 08EC
Authority key identifier: 71:AA:58:CD:F1:B6:BD:7C:26:E6:1A:75:18:A4:D0:AD:2C:9F:1A:14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/capYzfG2vXwm5hp1GKTQrSyfGhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/90606AD670AA11ED8DAE4C5AC4F9AE02.roa
Signing time: Tue 16 Sep 2025 21:00:43 +0000
ROA not before: Tue 16 Sep 2025 21:00:43 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 17563
IP address blocks: 103.184.58.0/23 maxlen: 24
116.58.0.0/17 maxlen: 23
116.58.0.0/24 maxlen: 24
116.58.1.0/24 maxlen: 24
116.58.2.0/24 maxlen: 24
116.58.3.0/24 maxlen: 24
116.58.4.0/24 maxlen: 24
116.58.5.0/24 maxlen: 24
116.58.6.0/24 maxlen: 24
116.58.7.0/24 maxlen: 24
116.58.8.0/24 maxlen: 24
116.58.9.0/24 maxlen: 24
116.58.10.0/24 maxlen: 24
116.58.11.0/24 maxlen: 24
116.58.12.0/24 maxlen: 24
116.58.13.0/24 maxlen: 24
116.58.14.0/24 maxlen: 24
116.58.15.0/24 maxlen: 24
116.58.16.0/24 maxlen: 24
116.58.17.0/24 maxlen: 24
116.58.18.0/24 maxlen: 24
116.58.19.0/24 maxlen: 24
116.58.20.0/24 maxlen: 24
116.58.21.0/24 maxlen: 24
116.58.22.0/24 maxlen: 24
116.58.23.0/24 maxlen: 24
116.58.24.0/24 maxlen: 24
116.58.25.0/24 maxlen: 24
116.58.26.0/24 maxlen: 24
116.58.27.0/24 maxlen: 24
116.58.28.0/24 maxlen: 24
116.58.29.0/24 maxlen: 24
116.58.30.0/24 maxlen: 24
116.58.31.0/24 maxlen: 24
116.58.32.0/24 maxlen: 24
116.58.33.0/24 maxlen: 24
116.58.34.0/24 maxlen: 24
116.58.35.0/24 maxlen: 24
116.58.36.0/24 maxlen: 24
116.58.37.0/24 maxlen: 24
116.58.38.0/24 maxlen: 24
116.58.39.0/24 maxlen: 24
116.58.40.0/24 maxlen: 24
116.58.41.0/24 maxlen: 24
116.58.42.0/24 maxlen: 24
116.58.43.0/24 maxlen: 24
116.58.44.0/24 maxlen: 24
116.58.45.0/24 maxlen: 24
116.58.46.0/24 maxlen: 24
116.58.47.0/24 maxlen: 24
116.58.48.0/24 maxlen: 24
116.58.49.0/24 maxlen: 24
116.58.50.0/24 maxlen: 24
116.58.51.0/24 maxlen: 24
116.58.52.0/24 maxlen: 24
116.58.53.0/24 maxlen: 24
116.58.54.0/24 maxlen: 24
116.58.55.0/24 maxlen: 24
116.58.56.0/24 maxlen: 24
116.58.57.0/24 maxlen: 24
116.58.58.0/24 maxlen: 24
116.58.59.0/24 maxlen: 24
116.58.60.0/24 maxlen: 24
116.58.61.0/24 maxlen: 24
116.58.62.0/24 maxlen: 24
116.58.63.0/24 maxlen: 24
116.58.64.0/24 maxlen: 24
116.58.65.0/24 maxlen: 24
116.58.66.0/24 maxlen: 24
116.58.67.0/24 maxlen: 24
116.58.68.0/24 maxlen: 24
116.58.69.0/24 maxlen: 24
116.58.70.0/24 maxlen: 24
116.58.71.0/24 maxlen: 24
116.58.72.0/24 maxlen: 24
116.58.73.0/24 maxlen: 24
116.58.74.0/24 maxlen: 24
116.58.75.0/24 maxlen: 24
116.58.76.0/24 maxlen: 24
116.58.77.0/24 maxlen: 24
116.58.78.0/24 maxlen: 24
116.58.79.0/24 maxlen: 24
116.58.80.0/24 maxlen: 24
116.58.81.0/24 maxlen: 24
116.58.82.0/24 maxlen: 24
116.58.83.0/24 maxlen: 24
116.58.84.0/24 maxlen: 24
116.58.85.0/24 maxlen: 24
116.58.86.0/24 maxlen: 24
116.58.87.0/24 maxlen: 24
116.58.88.0/24 maxlen: 24
116.58.89.0/24 maxlen: 24
116.58.90.0/24 maxlen: 24
116.58.91.0/24 maxlen: 24
116.58.92.0/24 maxlen: 24
116.58.93.0/24 maxlen: 24
116.58.94.0/24 maxlen: 24
116.58.95.0/24 maxlen: 24
116.58.96.0/24 maxlen: 24
116.58.97.0/24 maxlen: 24
116.58.98.0/24 maxlen: 24
116.58.99.0/24 maxlen: 24
116.58.100.0/24 maxlen: 24
116.58.101.0/24 maxlen: 24
116.58.102.0/24 maxlen: 24
116.58.103.0/24 maxlen: 24
116.58.104.0/24 maxlen: 24
116.58.105.0/24 maxlen: 24
116.58.106.0/24 maxlen: 24
116.58.107.0/24 maxlen: 24
116.58.108.0/24 maxlen: 24
116.58.109.0/24 maxlen: 24
116.58.110.0/24 maxlen: 24
116.58.111.0/24 maxlen: 24
116.58.112.0/24 maxlen: 24
116.58.113.0/24 maxlen: 24
116.58.114.0/24 maxlen: 24
116.58.115.0/24 maxlen: 24
116.58.116.0/24 maxlen: 24
116.58.117.0/24 maxlen: 24
116.58.118.0/24 maxlen: 24
116.58.119.0/24 maxlen: 24
116.58.120.0/24 maxlen: 24
116.58.121.0/24 maxlen: 24
116.58.122.0/24 maxlen: 24
116.58.123.0/24 maxlen: 24
116.58.124.0/24 maxlen: 24
116.58.125.0/24 maxlen: 24
116.58.126.0/24 maxlen: 24
116.58.127.0/24 maxlen: 24
202.59.64.0/19 maxlen: 23
202.59.64.0/24 maxlen: 24
202.59.65.0/24 maxlen: 24
202.59.66.0/24 maxlen: 24
202.59.67.0/24 maxlen: 24
202.59.68.0/24 maxlen: 24
202.59.69.0/24 maxlen: 24
202.59.70.0/24 maxlen: 24
202.59.71.0/24 maxlen: 24
202.59.72.0/24 maxlen: 24
202.59.73.0/24 maxlen: 24
202.59.74.0/24 maxlen: 24
202.59.75.0/24 maxlen: 24
202.59.76.0/24 maxlen: 24
202.59.77.0/24 maxlen: 24
202.59.78.0/24 maxlen: 24
202.59.79.0/24 maxlen: 24
202.59.80.0/24 maxlen: 24
202.59.81.0/24 maxlen: 24
202.59.82.0/24 maxlen: 24
202.59.83.0/24 maxlen: 24
202.59.84.0/24 maxlen: 24
202.59.85.0/24 maxlen: 24
202.59.86.0/24 maxlen: 24
202.59.87.0/24 maxlen: 24
202.59.88.0/24 maxlen: 24
202.59.89.0/24 maxlen: 24
202.59.90.0/24 maxlen: 24
202.59.91.0/24 maxlen: 24
202.59.92.0/24 maxlen: 24
202.59.93.0/24 maxlen: 24
202.59.94.0/24 maxlen: 24
202.59.95.0/24 maxlen: 24
2400:68a0::/32 maxlen: 40
2400:68a0::/41 maxlen: 48
2400:68a0:80::/41 maxlen: 48
2400:68a0:100::/41 maxlen: 48
2400:68a0:180::/41 maxlen: 48
2400:68a0:200::/41 maxlen: 48
2400:68a0:280::/41 maxlen: 48
2400:68a0:300::/41 maxlen: 48
2400:68a0:380::/41 maxlen: 48
2400:68a0:a000::/41 maxlen: 48
2400:68a0:a580::/41 maxlen: 48
2400:68a0:af80::/41 maxlen: 48
2400:68a0:f000::/41 maxlen: 48
2400:68a0:fa00::/41 maxlen: 48
2400:68a0:ff80::/41 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.crl
rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/capYzfG2vXwm5hp1GKTQrSyfGhQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 21:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2284 (0x8ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165A0B, serialNumber=71AA58CDF1B6BD7C26E61A7518A4D0AD2C9F1A14
Validity
Not Before: Sep 16 21:00:43 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=68c9cffa-0d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a3:8b:ed:a8:7b:7e:6c:54:4f:ec:2d:a6:cf:
0d:10:15:bb:84:e2:51:7a:5e:bc:3d:74:71:81:e7:
a5:1d:fd:98:33:7a:e1:89:9b:b1:4f:80:75:fd:57:
52:6b:ed:f0:2d:b9:b9:41:4e:80:92:45:fe:39:00:
ce:84:73:45:ad:e3:4a:77:a9:9b:30:e4:08:67:82:
1c:c1:b9:91:f4:00:3f:6c:f2:2c:5b:22:69:2f:f2:
99:eb:d2:e4:0b:49:31:b7:50:18:26:8c:29:ad:23:
44:17:a1:8e:73:14:c5:dc:a7:27:ec:3e:c8:35:e4:
12:3d:6b:4d:08:5b:1b:5c:c0:9d:16:1c:2e:5f:68:
a9:4a:ac:3a:02:f5:c4:74:77:2c:35:4b:b8:86:82:
01:1d:ab:c0:87:11:c8:d9:23:9a:7c:91:bd:04:b7:
1d:81:86:4e:dd:58:68:3f:e6:51:b1:42:fd:39:0a:
b9:36:c1:32:68:02:51:60:af:0a:45:ac:00:97:02:
74:43:8f:f0:a2:1b:c9:0a:29:56:47:6c:01:45:23:
95:1e:0b:66:15:09:67:f2:6d:13:0c:77:75:41:3b:
46:4b:9d:aa:ff:81:b2:76:df:aa:53:cb:1f:5b:a7:
15:49:be:ff:d9:52:15:75:38:75:c6:e5:83:09:f4:
36:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A1:8B:31:8C:63:FC:E6:19:9F:1A:5B:4C:8B:87:26:CD:ED:F5:C9
X509v3 Authority Key Identifier:
keyid:71:AA:58:CD:F1:B6:BD:7C:26:E6:1A:75:18:A4:D0:AD:2C:9F:1A:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/capYzfG2vXwm5hp1GKTQrSyfGhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/90606AD670AA11ED8DAE4C5AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.184.58.0/23
116.58.0.0/17
202.59.64.0/19
IPv6:
2400:68a0::/32
Signature Algorithm: sha256WithRSAEncryption
0f:e1:66:44:da:43:ee:31:02:a3:54:ba:c9:2e:06:23:d1:c0:
7b:69:66:60:54:60:f3:7d:fb:29:05:57:d8:34:a0:11:11:2d:
00:4a:f1:10:b6:57:37:27:f8:90:3a:f8:25:c3:1a:a8:db:e3:
b8:eb:a8:e6:74:0b:01:06:d0:76:70:da:57:1f:f4:f2:ad:74:
8a:f3:e7:49:c4:25:37:6b:f3:22:d8:74:76:63:b4:66:b3:26:
0a:91:2b:7a:7d:b1:ec:7e:61:f7:1c:50:11:ee:9b:60:d0:dc:
19:5c:29:98:12:08:f0:cf:ca:5c:13:0c:5c:d7:92:01:a3:0b:
22:f4:e7:d1:54:f0:46:99:1c:29:e0:28:16:3a:3f:40:ad:6a:
df:f2:3d:ed:cb:d1:27:ac:3d:60:a1:b5:02:43:64:fe:5f:7f:
bd:53:27:31:36:f4:89:05:87:c9:16:d0:62:6f:f5:10:43:f4:
2b:3e:96:b4:c9:23:f8:cc:2d:f8:66:68:0e:27:8a:7e:76:b4:
6f:3c:a4:fd:18:b5:3b:7c:ea:63:cc:02:4f:0d:5d:11:d3:0d:
9f:9c:84:af:69:2b:3e:a5:c9:bb:63:d2:d4:80:83:ba:8d:80:
6e:31:2a:52:1b:03:8f:e3:8c:c6:f6:25:ba:c8:c2:b3:50:32:
fb:2d:8e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:25:30 2025 by rpki-client